How To Store Certificate (.pem) in Azure Keyvault using Secrets and fetch values from secrets into pem file using python

#azure #python #keyvault #certificate

Convert .pem Certificate file into base64 using certutil

certutil -encode filename.cer newfilename.cer

Go to azure portal
Select ketvault service
Create a new keyvault
Select secrets from setting on sidepanel
Create a new secret
Copy paste base 64 into secret value and save it

### Python code to fetch certificate value from keyvault and store into a pem file

from azure.identity import DefaultAzureCredential
from azure.keyvault.secrets import SecretClient
credentials = DefaultAzureCredential()
secret_client = SecretClient(vault_url=key_vault_url, credential=credentials)
cert_value =  secret_client.get_secret("Certificate").value

with open('certificate.pem','w') as fopen:
        fopen.write(base64.b64decode(cert_value).decode())